Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/01972e0f-4924-381a-9985-90ac107e9762.roa
File:                     01972e0f-4924-381a-9985-90ac107e9762.roa (raw, json)
Hash identifier:          Z7ukavtJmNCB2RxjOMAJrWMzqjMWx833Lo1B4xD++zs=
Subject key identifier:   A6:13:3A:F0:E6:C8:60:82:C4:3D:B2:52:13:36:94:58:72:2F:66:7E
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F43285849B6DF578EB7B6C3D04104B740
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/01972e0f-4924-381a-9985-90ac107e9762.roa
Signing time:             Fri 02 May 2025 01:00:47 +0000
ROA not before:           Fri 02 May 2025 01:00:47 +0000
ROA not after:            Thu 31 Jul 2025 01:00:47 +0000
asID:                     64267
IP address blocks:        167.160.72.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b6:df:57:8e:b7:b6:c3:d0:41:04:b7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: May  2 01:00:47 2025 GMT
            Not After : Jul 31 01:00:47 2025 GMT
        Subject: CN=eb2d3fe1-fc96-4512-b9b7-29e3a3ce0fbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8c:fa:85:f0:88:3c:27:1f:9b:74:7a:22:3c:
                    c5:5e:b5:2b:95:80:e6:62:bb:65:ef:78:34:fa:1a:
                    b4:88:48:8c:98:e8:ba:dc:a2:be:f4:d9:06:71:c5:
                    63:9f:c3:23:e7:4a:a6:cc:66:0e:a4:2e:97:cf:d5:
                    89:1b:1c:8f:57:2a:b8:57:9e:73:5b:37:97:6f:bb:
                    9b:f1:4d:57:71:f4:24:64:45:39:38:cd:16:96:f9:
                    1e:15:70:77:fd:f3:b0:6c:dc:72:b0:65:f9:5f:1e:
                    8b:14:e0:11:44:d2:e2:ab:3c:ee:35:ff:c9:8b:80:
                    38:8d:72:d7:e2:11:f6:0f:5e:a3:e9:64:5c:25:73:
                    52:50:3a:33:a3:36:dd:55:c5:7a:1f:f5:34:bd:c1:
                    11:f2:97:e1:0f:98:8f:e3:70:43:39:2a:c5:27:26:
                    3b:8b:88:28:55:e7:fb:8f:3b:bf:ff:ae:2f:53:05:
                    c9:54:5d:65:c8:51:03:ee:88:cd:8f:92:52:1d:10:
                    56:47:1f:ae:c6:cb:6e:70:5b:73:da:70:7a:43:f2:
                    f5:6b:ea:29:a6:66:cf:81:31:f5:eb:d5:c7:45:ef:
                    c4:87:56:b6:cd:2f:d1:5d:ff:2f:8f:22:f3:ef:fb:
                    e8:80:fd:31:bb:db:b4:67:67:8f:01:6c:36:51:90:
                    d4:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:13:3A:F0:E6:C8:60:82:C4:3D:B2:52:13:36:94:58:72:2F:66:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/01972e0f-4924-381a-9985-90ac107e9762.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.160.72.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         dd:a6:f3:38:22:99:be:f7:e0:6c:07:ca:9d:d0:82:1b:52:64:
         b3:c6:88:d0:f1:91:54:57:ea:4a:ca:31:52:a8:32:52:d8:5a:
         0f:76:90:8f:84:9d:ba:70:cb:44:93:15:93:f4:06:36:6e:83:
         c6:2d:8a:58:5a:0f:1c:7f:f2:d3:6a:e7:b7:ca:52:01:3c:15:
         f3:ca:a4:d1:2b:2e:5f:58:46:4c:26:cc:92:27:7a:85:ca:89:
         e3:00:ea:8a:18:f5:dc:e6:ad:ff:5f:3f:51:02:4d:60:9c:b8:
         4a:03:bb:8d:10:59:1b:d9:9d:5b:e5:66:08:08:fc:57:e3:1d:
         a3:e6:9c:6d:e0:dd:23:c5:aa:0d:55:06:68:7e:a0:ff:ab:8c:
         03:bc:98:f6:c0:d3:63:4d:87:18:0a:58:fd:e9:b1:08:12:71:
         b4:c9:a1:36:4c:2c:b8:1a:96:b0:ab:b4:6d:9f:30:40:a8:a9:
         ae:83:40:8f:a0:cc:27:aa:27:3c:03:9c:ed:6d:db:09:63:07:
         47:be:b9:3f:ee:5a:82:b3:5c:b8:55:e0:cc:dd:e0:47:17:56:
         e6:55:3b:cf:02:1f:86:6b:e8:d6:21:ec:12:2e:c5:b7:9f:90:
         a4:8f:d4:98:17:f7:bd:cc:c1:3b:e8:6a:d0:cc:7f:7a:a9:28:
         92:56:51:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 20:19:18 2025 by rpki-client